Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d5a5049-d14b-3b4b-a644-b009587ea323.roa
File:                     8d5a5049-d14b-3b4b-a644-b009587ea323.roa (raw, json)
Hash identifier:          SO/WmnIn1y3/TC2yKAWheh5uT5FdetYaWmm5clQYaOE=
Subject key identifier:   01:A5:C2:43:FF:CE:89:EE:1D:D2:65:E9:8D:91:1A:AB:1B:DC:AE:5B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E1255C79B4B6117C7470E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d5a5049-d14b-3b4b-a644-b009587ea323.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.25.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:25:5c:79:b4:b6:11:7c:74:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=40950c26-a251-4662-8c43-b78bd09f0a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:8f:31:97:fc:0b:ba:e7:51:75:71:98:77:
                    d5:59:82:25:0a:a7:c7:f6:44:10:84:15:ab:4d:03:
                    46:be:d7:2f:ce:d0:e1:08:63:89:6e:fc:0f:4c:34:
                    23:4e:0b:7e:73:5e:75:e1:b9:77:bc:16:31:27:83:
                    a2:a9:22:5f:76:95:4e:f0:9f:09:bf:b5:5f:3f:14:
                    e6:48:c5:ca:f1:51:b3:51:8c:8a:7b:48:b3:72:cf:
                    6a:e2:35:4b:b3:7d:f9:66:5a:24:89:43:8e:f6:b2:
                    38:06:29:aa:e8:2c:b6:f6:88:52:ad:9c:a9:83:2d:
                    5d:8c:a0:80:df:bc:dd:8a:fe:41:61:ab:ae:30:53:
                    cc:92:52:c1:bd:8c:87:e4:36:39:e8:d5:38:34:4b:
                    eb:9f:49:5e:84:d1:12:6c:c3:a5:45:2c:8b:c4:06:
                    96:75:5c:a7:7c:ce:f6:64:f9:fc:67:86:c4:25:26:
                    fe:ba:b5:5e:0e:ae:87:90:74:77:3a:88:7e:0c:42:
                    65:fa:d3:62:1c:e2:4c:18:35:27:b3:ce:84:34:eb:
                    61:e3:7d:ba:27:e5:c4:09:85:e9:fa:bd:2f:1a:c1:
                    2a:ca:e9:18:2c:d5:7e:96:1f:e8:65:ea:0f:2c:f5:
                    54:de:dc:9f:78:84:5a:c7:31:a4:c1:30:e8:5a:15:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A5:C2:43:FF:CE:89:EE:1D:D2:65:E9:8D:91:1A:AB:1B:DC:AE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d5a5049-d14b-3b4b-a644-b009587ea323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:80:d1:00:04:2c:e9:4a:74:40:d9:b1:6f:7d:72:2c:d7:
         e2:d9:d3:23:a5:86:8e:5c:80:a2:41:37:b4:74:bb:45:ae:3a:
         08:66:45:e8:c8:1b:32:f9:51:c7:7a:ec:38:e5:cc:2c:b4:bb:
         e5:77:21:81:b0:ce:ae:86:66:65:0a:32:fb:83:70:a3:be:88:
         9b:0b:2e:ef:8d:6b:c2:54:77:c8:f7:67:c1:20:8d:4f:10:72:
         39:07:64:91:db:9d:a3:9f:8a:c7:e6:7f:1a:a7:c0:5a:68:5e:
         9f:c7:eb:98:c2:ac:89:29:be:cc:28:94:42:57:38:30:a2:15:
         d6:8a:01:20:13:a9:4f:6f:b4:21:05:fe:45:a6:f9:73:c9:bb:
         1f:22:98:9a:2e:4e:67:3a:01:95:ef:7e:46:92:a6:ba:68:ca:
         fa:1c:57:41:60:a4:b4:2e:c2:8b:45:4b:03:a4:37:86:11:83:
         29:38:96:64:3f:d7:ac:34:5f:90:5f:61:b0:38:70:f8:c8:0f:
         50:29:9e:6d:e2:50:5f:de:5d:d3:a6:1a:b9:0d:30:35:ab:e9:
         ff:0a:95:99:07:f4:13:d6:84:46:e7:fc:ee:24:93:5a:73:89:
         52:af:d6:14:d4:00:4e:8e:0b:50:df:50:5f:29:03:30:a2:73:
         e5:a4:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:28 2026 by rpki-client